Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File: tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier: fmDM2NdeLBaMEM8bswtEwYHCYuQuOS6L0mkJ8zAVRgM=
Subject key identifier: 0E:57:EF:5D:C2:80:97:2F:66:3F:31:2A:66:82:7F:E1:3B:DB:C0:4C
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial: 01A11A86DCDC81C9C0024B1CC9844BC95D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number: 0366
Signing time: Thu 08 Oct 2026 08:00:08 +0000
Manifest this update: Thu 08 Oct 2026 08:00:08 +0000
Manifest next update: Fri 09 Oct 2026 08:00:08 +0000
Files and hashes: 1: cKf_i1BKOsOVOz6z05RX1NKopHw.roa (hash: 0VE+3FGc3lBzs4pWdnG1Ws706SgN7R/OSEvdVqhc/2w=)
2: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
3: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: 89WZBAtk05ibjCUJXKfVTD8Y0LILScrEch0BqbBDeec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:86:dc:dc:81:c9:c0:02:4b:1c:c9:84:4b:c9:5d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Validity
Not Before: Oct 8 08:00:08 2026 GMT
Not After : Oct 9 08:00:08 2026 GMT
Subject: CN=0e57ef5dc280972f663f312a66827fe13bdbc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:9c:dc:ae:27:12:c0:47:5f:68:f4:b3:ea:
67:3d:2f:17:d8:2a:c8:d3:7f:6d:d1:8d:c7:37:e7:
ef:43:68:cb:b2:93:9c:6e:7c:c1:60:cf:65:02:72:
1c:57:38:b2:a7:79:78:6c:9d:bc:0c:12:a9:d9:91:
a5:e6:df:78:f7:79:a3:cc:38:fc:32:77:be:92:de:
fb:f1:52:1e:10:ff:5d:7e:e3:5f:69:31:85:2e:89:
5c:6b:d0:d5:f7:67:9c:5b:0d:c4:0c:c1:b0:68:18:
6c:23:45:0b:ea:0e:c9:ed:03:c1:cb:ff:23:8c:75:
1b:10:41:f0:93:ad:9c:dd:28:2a:30:b2:53:ec:ef:
79:fc:24:98:68:6c:f4:c8:24:5c:e8:d5:5c:33:8b:
14:56:4e:b3:c6:d4:f1:6c:9d:3f:55:2a:0c:52:b8:
c5:c1:8d:97:0b:ee:b8:8a:51:74:86:5d:48:9a:b8:
9f:26:be:32:a1:7e:20:b5:ab:f5:9b:89:41:a0:46:
a5:7d:8c:75:d2:6c:71:34:92:c1:b8:0d:8e:58:63:
94:82:ee:49:c8:ee:29:46:cc:41:d5:50:f7:70:fe:
ec:b9:0e:42:d5:18:2f:07:e1:83:58:07:cb:a5:d9:
ec:b0:03:24:2c:53:1f:49:e4:7a:b5:c5:3e:16:79:
d7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:57:EF:5D:C2:80:97:2F:66:3F:31:2A:66:82:7F:E1:3B:DB:C0:4C
X509v3 Authority Key Identifier:
keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:91:d9:58:e9:16:cf:89:ea:b1:50:39:c5:b1:3e:21:a7:6f:
17:3d:46:25:ef:76:51:44:07:a1:a0:2a:90:4f:9e:58:11:34:
20:80:84:c3:c0:52:81:f1:5c:b6:23:8d:33:90:11:62:40:ce:
36:04:3d:69:3e:0a:bc:eb:7c:11:b1:71:8f:dc:f9:a7:ff:ee:
be:f0:7f:1e:fa:fa:75:29:ec:6a:e6:b6:a3:bb:98:41:c2:76:
34:cf:49:27:07:95:99:b4:1b:c2:3b:3c:fc:78:02:8b:47:0b:
14:fc:4b:b2:d3:31:94:28:cb:0c:43:ca:9a:c6:c8:d9:d1:8b:
af:7b:0c:d6:6a:ca:b3:d2:4c:4b:c7:aa:7e:21:cd:4b:d9:19:
ef:be:4d:37:04:a3:bf:1f:d7:fe:4d:b8:3e:2e:60:f5:ec:7e:
1c:c7:b1:d5:a8:85:15:77:35:47:a3:e7:e5:a6:64:43:e6:c4:
54:80:3b:4a:dc:85:99:30:2d:c9:84:23:fc:6b:c9:a9:8d:66:
46:00:7f:1c:84:69:e5:c0:2c:53:d7:8c:f5:16:f6:1e:79:7b:
5f:08:f5:de:1b:15:84:54:bc:53:ab:12:65:8d:9e:f1:d2:c4:
35:18:89:e2:e2:39:9e:30:ea:41:cf:ff:32:38:6c:00:24:87:
2f:39:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:48:14 2026 by rpki-client